astro 7.0.8 → 7.1.0

package/dist/types/public/internal.d.ts

@@ -210,26 +210,27 @@ export interface SSRResult {
     key: Promise<CryptoKey>;
     _metadata: SSRMetadata;
     /**
-     * `header`:
-     * - <meta> for static pages
-     * - Response header for dynamic pages
-     *
-     * `meta`:
-     * - <meta> for all pages
-     *
-     * `adapter`:
-     * - nothing for static pages (the adapter does this)
-     * - Response header for dynamic pages
+     * `cspDestination`:
+     * - `header`: `<meta>` for static pages, response header for dynamic pages
+     * - `meta`: `<meta>` for all pages
+     * - `adapter`: nothing for static pages (the adapter does this), response header for dynamic pages
      */
     cspDestination: NonNullable<SSRManifestCSP['cspDestination']>;
     shouldInjectCspMetaTags: boolean;
     cspAlgorithm: SSRManifestCSP['algorithm'];
+    directives: SSRManifestCSP['directives'];
+    /** @deprecated Use {@linkcode scriptDirective} instead. Holds the `default`-kind `script-src` hashes. */
     scriptHashes: SSRManifestCSP['scriptHashes'];
+    /** @deprecated Use {@linkcode scriptDirective} instead. Holds the `default`-kind `script-src` resources. */
     scriptResources: SSRManifestCSP['scriptResources'];
+    /** @deprecated Use {@linkcode styleDirective} instead. Holds the `default`-kind `style-src` hashes. */
     styleHashes: SSRManifestCSP['styleHashes'];
+    /** @deprecated Use {@linkcode styleDirective} instead. Holds the `default`-kind `style-src` resources. */
     styleResources: SSRManifestCSP['styleResources'];
-    directives: SSRManifestCSP['directives'];
+    /** @deprecated Use {@linkcode scriptDirective}'s `strictDynamic` instead. */
     isStrictDynamic: SSRManifestCSP['isStrictDynamic'];
+    scriptDirective: SSRManifestCSP['scriptDirective'];
+    styleDirective: SSRManifestCSP['styleDirective'];
     internalFetchHeaders?: Record<string, string>;
 }
 /**

package/dist/vite-plugin-app/pipeline.js

@@ -8,6 +8,7 @@ import { loadRenderer } from "../core/render/index.js";
 import { routeIsRedirect } from "../core/routing/helpers.js";
 import { findRouteToRewrite } from "../core/routing/rewrite.js";
 import { isPage } from "../core/util.js";
+import { stringifyForScript } from "../runtime/server/escape.js";
 import { getComponentMetadata } from "../vite-plugin-astro-server/metadata.js";
 import { createResolve } from "../vite-plugin-astro-server/resolve.js";
 import { PAGE_SCRIPT_ID } from "../vite-plugin-scripts/index.js";
@@ -90,7 +91,7 @@ class RunnablePipeline extends Pipeline {
             debugInfo: await this.getDebugInfo(),
             placement: settings.config.devToolbar.placement
           };
-          const children = `window.__astro_dev_toolbar__ = ${JSON.stringify(additionalMetadata)}`;
+          const children = `window.__astro_dev_toolbar__ = ${stringifyForScript(additionalMetadata)}`;
           scripts.add({ props: {}, children });
         }
       }

package/dist/vite-plugin-astro-server/route-guard.js

@@ -48,9 +48,10 @@ function routeGuardMiddleware(settings) {
     } catch {
       return next();
     }
+    const resolved = new URL("." + pathname, config.root);
     const fsInfo = {
-      existsInPublic: fs.existsSync(new URL("." + pathname, config.publicDir)),
-      existsInSrc: fs.existsSync(new URL("." + pathname, config.srcDir)),
+      existsInPublic: resolved.pathname.startsWith(config.publicDir.pathname) && fs.existsSync(resolved),
+      existsInSrc: resolved.pathname.startsWith(config.srcDir.pathname) && fs.existsSync(resolved),
       existsAtRootAsFile: false
     };
     if (accept.includes("text/html") && !url.includes("?") && !VITE_INTERNAL_PREFIXES.some((prefix) => pathname.startsWith(prefix))) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "astro",
-  "version": "7.0.8",
+  "version": "7.1.0",
   "description": "Astro is a modern site builder with web best practices, performance, and DX front-of-mind.",
   "type": "module",
   "author": "withastro",
@@ -147,8 +147,8 @@
     "yargs-parser": "^22.0.0",
     "zod": "^4.3.6",
     "@astrojs/internal-helpers": "0.10.1",
-    "@astrojs/markdown-satteri": "0.3.4",
-    "@astrojs/telemetry": "3.3.3"
+    "@astrojs/telemetry": "3.3.3",
+    "@astrojs/markdown-satteri": "0.3.4"
   },
   "optionalDependencies": {
     "sharp": "^0.34.0 || ^0.35.0"